Privacy Notice: This privacy policy explains how FrJosh.com collects, uses, and protects information when users access the Service.
1. Information Collection
The following types of information are collected:
User-Provided Information:
- Google account information when authenticating via OAuth
- Email addresses and calendar data (only when explicitly authorized)
- Contact information voluntarily shared
Automatically Collected Information:
- Server logs (IP addresses, browser type, timestamps)
- Usage data (pages visited, time spent on site)
2. Information Usage
Collected information is used for the following purposes:
- Service Provision: Providing OAuth-authenticated access to Google services
- Email Management: Accessing and managing emails (Personal, Parish, and Lolek Productions accounts)
- Calendar Integration: Accessing and managing calendar events when authorized
- System Maintenance: Maintaining and improving the Service
- Security: Detecting and preventing unauthorized access or abuse
3. Google OAuth Integration
Google OAuth is used to access:
- Gmail: Reading, sending, and managing emails for authorized accounts
- Google Calendar: Reading and managing calendar events
- Google Contacts: Accessing contact information
Data Access Limitations:
- Only data explicitly authorized during the OAuth consent process is accessed
- Access can be revoked at any time through Google Account settings
- Data is never sold to third parties
- Data is used solely for providing the requested functionality
4. Account Types
Three OAuth-authenticated account types are supported:
- Personal Account: Personal email and calendar management
- Parish Account: Parish-related email and calendar management
- Lolek Productions Account: Business email and calendar management
Each account type has separate OAuth authorizations and data access scopes.
5. Data Storage and Security
Industry-standard security measures are implemented to protect data:
- OAuth tokens are stored securely with encryption
- Server communications use HTTPS/TLS encryption
- Access to systems is restricted and logged
- Regular security audits and updates
6. Data Retention
Data is retained only as long as necessary to provide the Service or as required by law. OAuth tokens are retained until authorization is revoked through Google's consent management.
7. Third-Party Services
This Service integrates with:
- Google Services: Gmail, Calendar, Contacts (via OAuth)
- Claude AI: For personal assistant functionality
These services have their own privacy policies available for review.
8. User Rights
Users have the right to:
- Access: Request a copy of data
- Rectification: Correct inaccurate data
- Deletion: Request deletion of data
- Revoke Access: Revoke OAuth permissions at any time via Google Account settings
- Data Portability: Request data in a portable format
9. Cookies and Tracking
This website uses minimal cookies for:
- Authentication session management
- Preference storage
Third-party advertising cookies or tracking pixels are not used.
10. Children's Privacy
This Service is not directed at children under 13. Personal information from children under 13 is not knowingly collected.
11. Changes to Privacy Policy
This privacy policy may be updated from time to time. Material changes will be communicated by posting the new policy on this page and updating the "Last Updated" date.
12. Contact Information
For questions, concerns, or requests regarding this Privacy Policy or personal data, contact:
Fr. Josh McCarty
Email: fr.josh@lolekproductions.org
Website: https://frjosh.com
13. Legal Compliance
This Service complies with:
- Google API Services User Data Policy
- General Data Protection Regulation (GDPR) principles
- California Consumer Privacy Act (CCPA) where applicable